v0.4.2

Documentation

• README: use import download from '@mborne/dl'; in the usage example, consistent with the top-level await (#5)

Full Changelog: v0.4.1...v0.4.2

v0.4.1

Security

• Fix shell injection through sourceUrl / targetPath: wget is now executed with execFile (no shell) (#3, #4)

Fixes

• Remove the .part temp file only if it exists and reject with an Error (previously an uncaught ENOENT could crash the process)
• Remove types from package.json (index.d.ts was missing)

Documentation

• Maintenance status: this library is not actively maintained (see README)
• Add "Requirements" and "Security" sections, fix targetPath description

CI

• Test on Node.js 22.x / 24.x, upgrade GitHub actions and coveralls integration

Full Changelog: v0.4.0...v0.4.1

v0.4.0

docs(readme): update with await

v0.3.1

package.json - add missing debug

v0.3.0

package.json - v0.3.0